← Home

@fireproof/core

npm Repository Homepage
58
Versions
—
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

jchrisfastandfearless

Keywords

ledgerJSONdocumentIPLDCIDIPFS

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:cors AI (typosquat): @fireproof/core is a long-established package in its own namespace; Levenshtein match to 'cors' is coincidental. ai
phantom-deps phantom-dep:@types/node AI (phantom-deps): @types/node is a type-only dev dependency; not directly imported at runtime by convention. ai
phantom-deps phantom-dep:@adviser/cement AI (phantom-deps): Referenced in config files per analyzer note; stable false positive for this package. ai
phantom-deps phantom-dep:@fireproof/vendor AI (phantom-deps): Same org scope; used as a vendored bundle, not directly imported in source. ai

Versions (showing 58 of 58)

Version Deps Published
0.24.19 5 / 0
0.24.16 5 / 0
0.24.15 5 / 0
0.24.14 5 / 0
0.24.13 5 / 0
0.24.12 5 / 0
0.24.11 5 / 0
0.24.10 5 / 0
0.24.9 5 / 0
0.24.8 5 / 0
0.24.7 5 / 0
0.24.6 5 / 0
0.24.0 5 / 0
0.23.15 5 / 0
0.23.14 5 / 0
0.23.13 5 / 0
0.23.11 5 / 0
0.23.10 5 / 0
0.23.8 5 / 0
0.23.7 5 / 0
0.23.6 5 / 0
0.23.5 5 / 0
0.23.3 5 / 0
0.23.2 5 / 0
0.23.1 5 / 0
0.23.0 5 / 0
0.20.5 15 / 0
0.20.4 15 / 0
0.20.3 15 / 0
0.20.2 15 / 0
0.20.1 15 / 0
0.20.0 15 / 0
0.19.125 11 / 0
0.19.124 11 / 0
0.19.123 11 / 0
0.19.122 11 / 0
0.19.121 11 / 0
0.19.120 11 / 0
0.19.119 11 / 0
0.19.118 11 / 0
0.19.117 11 / 0
0.19.116 11 / 0
0.19.115 16 / 0
0.19.114 16 / 0
0.19.113 16 / 0
0.19.112 16 / 0
0.19.111 17 / 0
0.19.110 17 / 0
0.19.109 17 / 0
0.19.108 17 / 0
0.19.107 17 / 0
0.19.106 17 / 0
0.19.105 17 / 0
0.19.104 17 / 0
0.19.103 17 / 0
0.19.102 17 / 0
0.19.101 17 / 0
0.19.100 17 / 0

v0.20.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.20.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.20.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.20.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.20.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.125

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.124

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.123

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.122

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.121

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.120

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.119

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.118

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.117

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.116

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.115

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.114

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.113

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.112

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.111

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.110

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.109

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.108

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.107

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.106

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.105

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.104

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.103

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.102

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.100

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.